Access Control

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. runZero Platform superuser privilege escalationCVE-2026-5373runZero · CVSS 8.1 · 0.2% likely

   CWE-269

2. runZero Platform incorrect credential scopeCVE-2026-5384runZero · CVSS 5.8 · 0.2% likely

   CWE-863

3. runZero Platform MCP information leakCVE-2026-5374runZero · CVSS 5.8 · 0.2% likely

   CWE-863

4. runZero Platform cleartext secret exposureCVE-2026-5380runZero · CVSS 5.3 · 0.2% likely

   CWE-863

5. runZero Platform user creation leakCVE-2026-5378runZero · CVSS 5.8 · 0.2% likely

   CWE-863

6. runZero Explorer missing authorization checkCVE-2026-5383runZero · CVSS 4.4 · 0.2% likely

   CWE-863

7. runZero Platform MCP endpoint information leakCVE-2026-5382runZero · CVSS 3 · 0.2% likely

   CWE-863

8. runZero Platform task information leakCVE-2026-5381runZero · CVSS 2.2 · 0.2% likely

   CWE-863

9. runZero Platform dashboard configuration exposureCVE-2026-7778runZero · CVSS 5 · 0.2% likely

   CWE-269

10. runZero Platform MCP certification information leakCVE-2026-5379runZero · CVSS 3 · 0.1% likely

    CWE-863

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.